08-19-2024 08:45 AM
Hello @R.Christie699701 ,
Thanks for reaching out on LiveCommunity.
With a regular Cortex XDR license, the data is automatically sent to hot storage for the default retention period according to the license, typically 1 month. If you've purchased additional retention add-ons to extend the hot storage, this is added in monthly increments to the hot storage duration according to the license. For example, a Period-Based Retention - Hot Storage license enables you to extend all the data(All datasets according to your base license pro per endpoint/pro per GB) in hot storage for the number of months designated, while an Additional Hot Storage license provides flexible hot storage so you can extend only the data collected in specific datasets for the number of months designated.
So you can only choose between datasets when you have additional hot storage license.
Total days stored may not be relevant because the storage database is a snapshot based database hence it stores all relevant data in a given time.
Please click Accept as Solution to acknowledge that the answer to your question has been provided.
